wireguard-tools

wireguard-tools — tools for configuring WireGuard This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg8 and wg-quick8 utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android. More information may be found...

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Proof of Concept PoC Description This script checks for the CVE-2024-9466 vulnerability by appending /home/userSpace/devices/debug.txt to a list of target URLs or IP addresses. It determines if the target is vulnerable based on the HTTP response status code and whether...

selinux-notebook

The SELinux Notebook Introduction The SELinux Notebook is an Open Source book on SELinux, originally created by Richard Haines and donated to the SELinux community. The Notebook's goal is to be the most current and comprehensive book on SELinux, covering the Linux Kernel components, the userspace...

chimera

Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust — a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

gvisor

What is gVisor? gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language Go and runs in userspace. gVisor includes an runtime...

libnfc

root@kitploit: - Free/Libre Near Field Communication NFC library Libnfc historical contributors: Copyright C 2009 Roel Verdult Copyright C 2009-2015 Romuald Conty Copyright C 2010-2012 Romain Tartière Copyright C 2010-2013 Philippe Teuwen Copyright C 2012-2013 Ludovic Rousseau Additional...

gotatun

GotaTun A userspace WireGuard® implementation, and a fork of BoringTun. License All source code in this repository is subject to the terms of the Mozilla Public License, version 2.0 unless stated otherwise. A copy of this license can be found in the file "LICENSE" or at...

CVE-2017-5123

CVE-2017-5123 Linux privilege escalation exploiting waitid syscall. The exploit is brought to you by @XeR0x2A and @chaignc from HexpressoTeam for educational purposes only. The bug was introduced the 2017-05-21 and fixed 2017-10-09, 4.14.0-rc4+ is known vulnerable. asciicast If you have a...

ane

Asahi Neural Engine Reverse engineered Linux driver for the Apple Neural Engine ANE. All things Linux here. ane/: Kernel module ane.ko. Should move into tree soon. docs/: Documentation. WIP. Please don't look. libane/: Userspace lib. python/: Python bindings for libane...

SockFuzzer

SockFuzzer: XNU Kernel Fuzzing Framework Project Status SockFuzzer, originally designed as a networking-focused fuzzer for the XNU kernel used in macOS and iOS, has evolved into a comprehensive kernel fuzzing framework. While retaining its original name as a nod to its roots, SockFuzzer now cover...

K80Pro-miro-CVE-2026-64560

k80pro-miro-cve-2026-64560 Redmi K80 Pro miro 的 CVE-2026-64560 用户态本地提权移植项目。 🚀 不想看这么多文档？ 如果你不想深入研究 ，或者不想读这一堆 AI 生成的.md， 请直接看 dyc.md —— 一篇讲人话的快速上手： 从零到越狱（含 KernelSU），只讲要敲什么命令，不讲为什么。 上游漏洞利用及 Xiaomi 15 dada 适配来自 quyicheng03-boop， 本仓库是在其基础上为 K80 Pro 重新推导地址与常量后的移植成果。 本项目只做移植，不包含漏洞发现。 漏洞原理、利用链设计全部属于上游作者...

qemu-t8030

QEMU README QEMU 是一个通用且开源的全机器模拟器及用户态模拟器与虚拟化器。 QEMU 能够完全通过软件模拟一台完整的机器，无需任何硬件虚拟化支持。通过使用动态翻译技术，它可以实现非常出色的性能。QEMU 也可以与 Xen 和 KVM 虚拟机监控程序集成，以提供模拟硬件，同时让虚拟机监控程序管理 CPU。借助虚拟机监控程序支持，QEMU 能够使 CPU 达到接近原生的性能。当 QEMU 直接模拟 CPU 时，它能够在一台机器（例如 x8664 PC 主板）上运行为另一台机器（例如 ARMv7 主板）设计的操作系统。 QEMU 还能够为 Linux 和 BSD 内核接口提供用...

Linux Distros Unpatched Vulnerability : CVE-2026-90272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: armpmuv3: Zero initialize hwid branch stack field PERFSAMPLEBRANCHHWINDEX is supported by BRBE so hwid is passed to userspace, but it's never set by the...

DEBIAN-CVE-2026-90306

In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hwbreakpointcfihandler from ARM, making it not steal breakpoint type 0x03 ARMENTRYCFIBREAKPOINT unless CFI is actively used in the kernel. When not...

AZL-102093 CVE-2026-90226 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: avoid userspace overflow on invalid optlen nfcllcpgetsockopt casts optval to u32 user for putuser, so the kernel always stores 4 bytes regardless of the caller-supplied optlen. The existing mintu32, len, sizeofu32 only...

CVE-2026-93154

CVE-2026-93154 is a use-after-free vulnerability in the Linux kernel's RDMA/irdma subsystem. The root cause is the absence of refcounting on user-space ring Memory Regions (MRs) : userspace could deregister the MRs backing QP, CQ, or SRQ rings while they were still in use. The fix bumps the MR's ...

EUVD-2026-81967

In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hwbreakpointcfihandler from ARM, making it not steal breakpoint type 0x03 ARMENTRYCFIBREAKPOINT unless CFI is actively used in the kernel. When not...

CVE-2026-90306

CVE-2026-90306 affects the Linux kernel on ARM architectures. The vulnerability resides in the hw_breakpoint_cfi_handler() stub, which was unconditionally claiming breakpoint type 0x03 (ARM_ENTRY_CFI_BREAKPOINT) even when CFI (Control Flow Integrity) was not actively instrumented in the kernel. T...